Dhcp Snooping Configuration Guidelines - Cisco IE-3000-8TC Software Configuration Manual

Chapter 23 Configuring DHCP Features and IP Source Guard
Table 23-1 Default DHCP Snooping Configuration
Feature
DHCP server
DHCP relay agent
DHCP packet forwarding address
Checking the relay agent information
DHCP relay agent forwarding policy
DHCP snooping enabled globally
DHCP snooping information option
DHCP snooping option to accept packets on
3
untrusted input interfaces
DHCP snooping limit rate
DHCP snooping trust
DHCP snooping VLAN
DHCP snooping MAC address verification
DHCP snooping binding database agent
1. The switch responds to DHCP requests only if it is configured as a DHCP server.
2. The switch relays DHCP packets only if the IP address of the DHCP server is configured on the SVI of the DHCP client.
3. Use this feature when the switch is an aggregation switch that receives packets with option-82 information from an edge switch.

DHCP Snooping Configuration Guidelines

These are the configuration guidelines for DHCP snooping.
•
•
•
•
•
•
OL-13018-03
Default Setting
Enabled in Cisco IOS software, requires configuration
Enabled
None configured
Enabled (invalid messages are dropped)
Replace the existing relay agent information
Disabled
Enabled
Disabled
None configured
Untrusted
Disabled
Enabled
Enabled in Cisco IOS software, requires configuration. This feature is
operational only when a destination is configured.
You must globally enable DHCP snooping on the switch.
DHCP snooping is not active until DHCP snooping is enabled on a VLAN.
Before globally enabling DHCP snooping on the switch, make sure that the devices acting as the
DHCP server and the DHCP relay agent are configured and enabled.
When you globally enable DHCP snooping on the switch, these Cisco IOS commands are not
available until snooping is disabled. If you enter these commands, the switch returns an error
message, and the configuration is not applied.
ip dhcp relay information check global configuration command
–
ip dhcp relay information policy global configuration command
–
ip dhcp relay information trust-all global configuration command
–
ip dhcp relay information trusted interface configuration command
–
Before configuring the DHCP snooping information option on your switch, be sure to configure the
device that is acting as the DHCP server. For example, you must specify the IP addresses that the
DHCP server can assign or exclude, or you must configure DHCP options for these devices.
If the DHCP relay agent is enabled but DHCP snooping is disabled, the DHCP option-82 data
insertion feature is not supported.
2
Cisco IE 3000 Switch Software Configuration Guide
Configuring DHCP Snooping
1
2
2
23-7